Your privacy is part of your care.

We collect information you give us, such as your name, contact details, account preferences and booking details. If you use care services, your clinician may record clinical information in the care relationship.

We also collect limited technical information needed to keep the service secure and working, such as session data, device type and error logs. We do not put clinical details in ordinary logs.

• Account and contact information
• Appointment, payment and support records
• Clinical records created by your clinician, with consent
• Security and audit events

We use your information to create and secure your account, arrange appointments, process payments, send the reminders you request, provide support and meet legal or clinical safety obligations. We do not sell personal information.

We avoid using your care details for marketing. If we ever wish to use a testimonial or story publicly, we will ask for separate, specific consent and allow you to withdraw it.

Clinical notes are kept separate from public content and are available only to authorized members of your care team and staff with a specific clinical permission. You may be asked to consent before records are shared with another clinician. You can withdraw consent for future sharing, subject to legal and safety requirements.

There are limited situations where a clinician may need to share information without consent to protect you or someone else from serious harm, or where the law requires it. A clinician should explain this to you.

Access is role-based. A doctor can see information relevant to an authorized care relationship, not every patient on the platform. Support staff handle account and booking issues without routine access to clinical notes. Administrators manage operations and security under audit, not unrestricted clinical access.

We use service providers for hosting, payments and communication. They receive only what is needed for their task and are bound by confidentiality and security obligations.

We use encryption in transit, access controls, audit logging and secure session cookies. No system is completely risk-free. If a breach affects your information, we will follow applicable notification requirements.

We keep information only as long as needed for care, legal, financial and security requirements. You can ask to access, correct or delete your account information, subject to records a clinician must retain by law. Some requests may need identity verification.

You can control appointment reminders and choose a preferred language or doctor gender preference where the service supports it. Discreet notification wording is available for sensitive settings.

We use essential cookies to keep you signed in and protect your session. We do not use advertising cookies. If analytics are introduced, this policy will describe them and any choice you have.

Hamrah is intended for adults. A minor should use the service with a parent or guardian and the clinician's agreement. We may ask for additional consent where required.

We may update this policy as the service changes. The date at the top shows the latest version. Questions or privacy requests can be sent to support@hamrah.health.